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DETAILED ACTION 

Continued Examination Under 37 CFR 1.114 

1 . A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1.17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1 .17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 17 
August 2010 has been entered. In this amendment, claims 1,16, and 19 have been 
amended. 

2. Claims 1, 3-5, 7-17, 19, 21-24, and 27-30 are presented for examination. 

Response to Arguments 

3. Applicant's arguments with respect to claims 1 , 3-5, 7-1 7, 1 9, 21-24, and 27-30 
have been considered but are moot in view of the new ground(s) of rejection. 

Claim Objections 

4. Claim 21 is objected to because of the following informalities: 

a. In claim 21 , line 2: "the private key" lacks antecedent basis. 
Appropriate correction is required. 



Application/Control Number: 10/526,169 Page 3 

Art Unit: 2431 

Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

6. Claims 1, 3-5, 7-9, 13, 15-17, 19, 21-24, and 27-29 are rejected under 35 U.S.C. 
103(a) as being unpatentable over Brandys (WO 02/073877 A2) in view of Kelly (US 
Patent 6,044,154). 

As to claims 1 and 16, Brandys discloses a system and method for authenticating users 
and data, the system and method having: 

a portable data storage device including a non-volatile memory to 
store data (page 7, lines 8-12); 

an interface section to receive data from and transmit data to a host 
(page 4, lines 3-4); 

a master control unit to transfer data to and from the non-volatile 
memory (page 4, lines 2-3; page 10, lines 25-26); 

integrated circuit for generating at least one key (page 4, lines 1-2); 
a host computer, the host computer being arranged to transmit a 
command to the portable data storage device using the interface section to 
request the data (page 4, lines 17-18). 
Brandys fails to specifically disclose: 
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the portable data storage device being arranged, upon receiving the 
command from the host requesting the data stored in the non-volatile 
memory, the data stored prior to receiving the command, to generate the at 
least one key, to encrypt the generated key using a secret key that is 
permanently stored in the portable storage device and to transmit the 
encrypted key and the requested data stored in the non-volatile memory to 
the host using the interface section, wherein the secret key is permanently 
stored within the portable storage device prior to the generating at least 
one key, 

wherein the portable data storage device is further arranged to 
receive from the host a digital signature that is generated using the at least 
one generated key and the requested data transmitted to the host from the 
portable storage device, and the portable storage device is further 
arranged to use the received digital signature to verify that the requested 
data has been correctly received by the host. 

Nonetheless, these features are well known in the art and would have been an obvious 

modification of the teachings disclosed by Brandys, as taught by Kelly. 

Kelly discloses a system and method for dual-key reflexive encryption security, the 

system and method having: 

the portable data storage device (i.e. host) being arranged, upon 
receiving the command (i.e. demand) from the host (i.e. remote computer) 
requesting the data stored in the non-volatile memory (col. 8, lines 48-49), 
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the data stored prior to receiving the command, to generate the at least one 
key (i.e. session key), to encrypt the generated key using a secret key (i.e. 
permanent key) that is permanently stored in the portable storage device 
and to transmit the encrypted key and the requested data (i.e. identifying 
data) stored in the non-volatile memory to the host using the interface 
section (col. 8, lines 2-7), wherein the secret key is permanently stored 
within the portable storage device prior to the generating at least one key 
(col. 5, lines 17-19), 

wherein the portable data storage device (i.e. host) is further 
arranged to receive from the host (i.e. remote computer) a digital signature 
(i.e. encrypted response) that is generated using the at least one generated 
key (i.e. session key) and the requested data transmitted to the host from 
the portable storage device (col. 8, lines 20-25), and the portable storage 
device is further arranged to use the received digital signature to verify that 
the requested data has been correctly received by the host (col. 9, lines 10- 
12). 

It is well known in the art that checking the integrity of a signature based on a 
message ensures the integrity of the message, as evidenced by Kyojima et al. (US 
Patent 6,996,723 B1 and Kyojima hereinafter) in col. 1, lines 13-30. 

Given the teaching of Kelly, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Brandys with the teachings of Kelly by transmitting encrypted 
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key data, data, and signatures between the portable data storage device and the host. 
Kelly recites motivation by disclosing that transmitting encrypted key data and 
signatures between two devices ensures that an eavesdropper would be unable to 
uncover user identification information (col. 3, lines 29-33). It is obvious that the 
teachings of Kelly would have improved the teachings of Brandys by transmitting 
encrypted key data, data, and signatures between devices in order to protect the data. 



As to claim 19, Brandys discloses: 

the portable data storage device generating at least one key (page 4, 
lines 1-2); 

the host decrypting the encrypted key using the secret key 
permanently stored in the host (page 6, line 18). The examiner asserts that it 
would have been well known to one of ordinary skill in the art at the time the 
invention was made to use either symmetric keys, where the same key is used 
from encryption and decryption, or asymmetric keys for encryption/decryption 
because they are functionally equivalent. 
Brandys fails to specifically disclose: 

the portable data storage device receiving an instruction from the 
host requesting the data stored in a non-volatile memory of the portable 
data storage device, wherein the data is stored prior to receiving the 
instruction; 
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the portable data storage device encrypting the generated key using 
the secret key permanently stored in the portable data storage device, 
wherein the secret key is permanently stored within the portable storage 
device prior to the generating at least one key; 

the portable data storage device obtaining the requested data from 
the non-volatile memory and the portable data storage device transmitting 
to the host the requested data and the encrypted key; 

the host generating a digital signature that is generated using the 
decrypted key and the requested data; 

the host transmitting the digital signature from the host to the 
portable data storage device; 

the portable data storage device using the digital signature to verify 
that the requested data has been correctly received by the host. 
Nonetheless, these features are well known in the art and would have been an obvious 
modification of the teachings disclosed by Brandys, as taught by Kelly. 
Kelly discloses: 

the portable data storage device (i.e. host) receiving an instruction 
from the host (i.e. remote computer) requesting the data stored in a non- 
volatile memory of the portable data storage device, wherein the data is 
stored prior to receiving the instruction (col. 8, lines 48-49); 

the portable data storage device encrypting the generated key using 
the secret key permanently stored in the portable data storage device, 
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wherein the secret key is permanently stored within the portable storage 
device prior to the generating at least one key (col. 8, lines 9-16); 

the portable data storage device obtaining the requested data from 
the non-volatile memory and the portable data storage device transmitting 
to the host the requested data and the encrypted key (col. 7, lines 59-63; col. 
8, lines 2-7); 

the host generating a digital signature that is generated using the 
decrypted key and the requested data (col. 8, lines 20-25); 

the host transmitting the digital signature from the host to the 
portable data storage device (col. 8, lines 20-25); 

the portable data storage device using the digital signature to verify 
that the requested data has been correctly received by the host (col. 9, lines 
10-12). 

It is well known in the art that checking the integrity of a signature based on a 
message ensures the integrity of the message, as evidenced by Kyojima in col. 1, lines 
13-30. 

Given the teaching of Kelly, a person having ordinary skill in the art at the time of 
the invention would have readily recognized the desirability and advantages of 
modifying the teachings of Brandys with the teachings of Kelly by transmitting encrypted 
key data, data, and signatures between the portable data storage device and host. 
Please refer to the motivation recited above with respect to claims 1 and 1 6 as to why it 
is obvious to apply the teachings of Kelly to the teachings of Brandys. 
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As to claims 3 and 22, Brandys discloses: 

wherein the digital signature is produced by hashing the received 
data to generate a hash result, and encrypting the hash result using the 
generated key (page 4, lines 19-23). 

As to claims 4 and 23, Brandys discloses: 

wherein the generated key is the private key of a public key/private 
key pair (page 4, lines 1-3). 

As to claims 5 and 24, Brandys discloses: 

wherein the verification of the digital signature is performed in the 
portable data storage device using the public key (page 5, line 35). 

As to claims 7 and 27, Brandys discloses: 

wherein the requested data includes both data present in the non- 
volatile memory, and also biometric data obtained from a biometric sensor 
of the portable data storage device (page 2, lines 24-26). 

As to claims 8 and 28, Brandys fails to specifically disclose: 

the requested data is transmitted from the portable data storage 
device to the host in an encrypted form. 
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Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Brandys, as taught by Kelly. 
Kelly discloses: 

the requested data is transmitted from the portable data storage 
device to the host in an encrypted form (col. 8, lines 5-6). 
Given the teaching of Kelly, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Brandys with the teachings of Kelly by transmitting encrypted data. 
Please refer to the motivation recited above with respect to claims 1 and 16 as to why it 
is obvious to apply the teachings of Kelly to the teachings of Brandys. 

As to claims 9 and 29, Brandys discloses: 

a biometric sensor (page 3, lines 14-15); 
a verification engine for granting access to data stored in the 
portable data storage device based on a biometric verification of the user's 
identity by comparison of biometric data received using the biometric 
sensor with pre-stored biometric data (page 2, lines 24-26). 

As to claim 13, Brandys discloses: 

the interface section is for wireless communication with the host 

(page 3, lines 11-12). 
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As to claim 15, Brandys discloses: 

a camera for generating image data, and/or a microphone for 
capturing audio data (page 7, lines 19-20), the master control unit being 
arranged to store the image data and/or the audio data in the memory (page 
7, lines 8-12). 

As to claim 17, Brandys discloses: 

wherein the generated key is one key of a public key/private key pair 
(page 4, lines 1-3), and the host is arranged to generate a digital signature 
using the private key and the requested data (page 6, lines 19-21). 

As to claim 21 , Brandys discloses: 

wherein the host generates the digital signature using the private key 
and the requested data (page 4, lines 19-21). 

7. Claims 10 and 30 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Brandys in view of Kelly as applied to claims 1 and 19 above, and further in view of 
Iwagaki et al. (US 2003/0161468 A1 and Iwagaki hereinafter). 
As to claims 10 and 30, Brandys in view of Kelly fails to specifically disclose: 

a compression algorithm for exploiting any redundancy in data 
received by the portable data storage device to compress it before storing 
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it in the non-volatile memory, and a decompression engine to regenerate 
the data before it is transmitted from the portable data storage device. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Brandys in view of Kelly, as taught by 
Iwagaki. 

Iwagaki discloses a system and method for securing a storage device, the system and 
method having: 

a compression algorithm for exploiting any redundancy in data 
received by the portable data storage device to compress it before storing 
it in the non-volatile memory, and a decompression engine to regenerate 
the data before it is transmitted from the portable data storage device 

(0009, lines 13-17). 

Given the teaching of Iwagaki, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Brandys in view of Kelly with the teachings of Iwagaki by providing for 
compression and decompression of stored data. Iwagaki recites motivation by 
disclosing that data can be very large and storing uncompressed data in a storage 
device does not effectively utilize the storage capacity of the device (0009, lines 9-12). 
It is obvious that the teachings of Iwagaki would have improved the teachings of 
Brandys in view of Kelly by allowing for the compression and decompression of stored 
data in order to use the storage capacity of the device more effectively. 
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8. Claims 11, 12, and 14 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Brandys in view of Kelly as applied to claim 1 above, and further in 
view of Fang (US Patent 6,536,941 B1). 

As to claim 1 1 , Brandys in view of Kelly fails to specifically disclose: 

the interface section includes a USB connector and a USB interface 
device. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Brandys in view of Kelly, as taught by Fang. 
Fang discloses a wrist-worn personal flash disk apparatus, the apparatus having: 

the interface section includes a USB connector and a USB interface 
device (col. 1, lines 37-41). 
Given the teaching of Fang, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Brandys in view of Kelly with the teachings of Fang by allowing 
connectively through USB. Fang recites motivation by disclosing using a USB interface 
allows for easy establishment of a link to a host computer so that data can be read or 
written (col. 1 , lines 38-39). It is obvious that the teachings of Fang would have 
improved the teachings of Brandys in view of Kelly by providing for an interface using 
USB in order to allow for easy connectivity to a host. 

As to claim 12, Brandys in view of Kelly fails to specifically disclose: 
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the connector is a USB plug integral with the portable data storage 
device. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Brandys in view of Kelly, as taught by Fang. 
Fang discloses: 

the connector is a USB plug integral with the portable data storage 
device (col. 1, lines 37-41). 
Given the teaching of Fang, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Brandys in view of Kelly with the teachings of Fang by providing for a 
USB connection for the device. Please refer to the motivation recited above with 
respect to claim 11 as to why it is obvious to apply the teachings of Fang to the 
teachings of Brandys in view of Kelly. 

As to claim 14, Brandys in view of Kelly fails to specifically disclose: 

a housing, the housing including a narrowed end for use as a 
pointer. 

Nonetheless, this feature is well known in the art and would have been an obvious 
modification of the teachings disclosed by Brandys in view of Kelly, as taught by Fang. 
Fang discloses: 

a housing, the housing including a narrowed end for use as a pointer 

(33, Figure 1). 
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Given the teaching of Fang, a person having ordinary skill in the art at the time of the 
invention would have readily recognized the desirability and advantages of modifying 
the teachings of Brandys in view of Kelly with the teachings of Fang by providing for a 
housing with a narrowed end. Fang recites motivation by disclosing that the storage 
device can have multiple functions depending on the physical shape of the device 
(Abstract, lines 1-14). It is obvious that the teachings of Fang would have improved the 
teachings of Brandys in view of Kelly by providing for a specific shaped housing, such 
as a narrowed end, in order to allow for multiple functions of the device. 
It is also noted that "for use as a pointer" recites intended use and has been given little 
patentable weight. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Sarah Su whose telephone number is (571) 270-3835. 
The examiner can normally be reached on Monday through Friday 7:30AM-5:00PM 
EST.. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, William Korzuch can be reached on (571) 272-7589. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/Sarah Su/ 

Examiner, Art Unit 2431 



/William R. Korzuch/ 

Supervisory Patent Examiner, Art Unit 2431 



